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ABSTRACT 

A system and method for employing a key exchange key to facilitate secure 
communication is provided. The key exchange key can be employed, for example, to 
encrypt and/or decrypt dialog session key(s) that are used to encrypt and/or decrypt 
5 message(s) that form a dialog between an initiator system and target system. In one 
example, a key exchange key is unique to a service pair, while a dialog session key is 
unique to a particular dialog between the service pair. 

The system can facilitate end-to-end encryption of message data in a dialog — the 
message data is encrypted at one dialog endpoint and not decrypted until it reaches the 
10 other dialog endpoint. The system can be employed to facilitate secure dialog with 

minimal performance overhead when compared with conventional system(s). Optionally, 
the system can facilitate load balancing {e.g., among deployed instances of a service). In 
this example, secured dialogs to a service can be location transparent so that a dialog 
targeted to a service can be able to talk to any instance of the same service transparently 
1 5 without any additional security setup. 

The system employs both public key/private key asymmetric encryption 
technique(s) and symmetric encryption technique(s) to authenticate and secure 
information exchanged between an initiator system and a target system. 
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